#[eddie]!tell aaronpk I don't think it's a problem to do it from the client side. Just noticed it shifts the "burden" mostly from the IndieAuth server to the IndieAuth client. Not sure if there is one side that is better to deal with the complexity than the other.